Interface manipulation
Overview
If a user is able to reach restricted settings unintentionally — for example by navigating through unexpected paths or by exploiting a permissions misconfiguration — they may alter critical configuration without realising it. The downstream effect can be subtle software malfunctions, lost data or inconsistent results.
Hazardous situation: Critical settings are altered by a user who should not have access to them, leading to software malfunctions or misleading outputs.
How we mitigate interface manipulation- Permission-scoped settings. Configuration screens are gated by the user's role; see Roles & Permissions. Only users with the appropriate role can change critical settings such as search configuration or appraisal rules.
- Audited changes. Configuration changes are tracked in the Audit Trail, so unintended modifications can be detected and reverted.
- Configuration-specific guidance. Settings that affect search behaviour are documented in the Search configuration space. Reviewing it before changing values reduces the chance of an unintended change.
- Recover from accidental changes. Some artefacts have built-in recovery — see for example I unintentionally deleted or overwritten my query, how can I get it back? for query-level recovery.
- Report and escalate. If you suspect that someone has altered settings without authorisation, Report a problem or a bug and contact us via the in-app chat.